$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft File: bX2AV2xLO-av9DH40yM49x_fAd0.mft (raw, json) Hash identifier: qFsau7QH1RKw2QLte65Y5AkuABbqxBQ7qV1Q+/GQFdE= Subject key identifier: E4:61:F2:49:D4:62:27:08:F1:C5:E9:8F:C7:B7:6B:79:F2:2A:EF:80 Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD Certificate issuer: /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Certificate serial: 0F3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft Manifest number: 0F34 Signing time: Sat 04 Apr 2026 17:27:12 +0000 Manifest this update: Sat 04 Apr 2026 17:27:11 +0000 Manifest next update: Sat 11 Apr 2026 17:27:11 +0000 Files and hashes: 1: bX2AV2xLO-av9DH40yM49x_fAd0.crl (hash: hzSr8uLefv+X//BTgEYnO0YAEt/E1lMZWSHKnWGlxag=) 2: DA481A0CB61811F0ABB14C31C4F9AE02.roa (hash: RiZl8jCvbX7r5OvETTD24VIJBOcLys+YJ9YI4Mrkp2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3903 (0xf3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1B8, serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Validity Not Before: Apr 4 17:27:11 2026 GMT Not After : Apr 11 17:27:11 2026 GMT Subject: CN=69d149ef-0da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:14:35:b3:2f:aa:bf:08:0a:31:24:a4:eb: 01:6e:92:bb:7e:12:ca:78:1d:40:31:57:e2:6d:f8: bb:30:3c:a1:10:8d:91:74:a4:bd:2c:f2:a3:6f:07: 45:f6:de:14:7e:16:cf:ac:24:5b:45:ce:b9:db:ac: 33:f1:79:5d:89:a7:ae:f4:fc:f0:c7:e1:21:dc:b3: 0f:cd:14:ec:4a:83:8c:e2:bb:3f:d5:88:ce:10:d2: 31:c4:1a:f3:e1:0e:4f:d3:d2:e0:f3:31:d5:8f:76: 65:1b:40:18:cd:78:cf:5d:6e:6c:26:02:c6:2b:d2: 48:d9:0c:ff:00:ef:1d:89:f5:35:37:6b:d3:f5:2b: 64:03:1f:80:ea:65:3f:a7:2a:6f:e8:47:f4:c8:9b: 35:0b:e9:e2:30:3f:28:ae:c2:d0:d5:1e:83:8f:1f: f0:70:94:9b:23:e1:a7:df:1f:45:c4:d6:e1:91:3d: 4c:d7:57:56:5a:b7:8e:55:e6:d8:c6:df:50:de:e7: db:63:22:3e:a3:e5:d8:cf:38:23:ce:1a:d5:69:7c: 40:b7:bb:c4:4a:6b:9a:c3:f8:62:9d:3b:82:0a:7f: b3:b3:49:26:18:cd:90:76:b8:d9:e0:3f:e3:fb:24: c6:65:40:3b:55:f3:3c:93:1a:fc:e0:e3:4e:62:8f: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:61:F2:49:D4:62:27:08:F1:C5:E9:8F:C7:B7:6B:79:F2:2A:EF:80 X509v3 Authority Key Identifier: keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:73:c3:e7:6c:91:8d:99:86:53:06:f6:1b:7e:36:19:d1:78: 68:b2:9f:d9:88:e1:ed:d7:4e:73:2f:dd:9e:79:f2:2e:49:96: b2:c9:03:b6:d7:d9:30:9a:3b:98:04:cb:3c:46:46:8a:71:14: 7b:e7:be:d8:a1:78:63:92:a4:e0:fc:7d:6a:52:b0:02:89:ec: fc:5f:a2:40:03:ab:a0:57:04:18:89:d8:4b:f3:dc:2c:66:c0: 3e:01:d9:62:4f:8c:a9:5f:08:7f:ba:a7:05:c0:3e:91:64:f2: cb:1b:6c:f9:3d:2d:e4:5d:fb:a2:64:a3:0e:bd:6f:20:88:5f: 7a:07:99:24:05:53:3d:4c:83:4a:b0:ee:84:76:74:de:ce:b9: 96:23:76:6c:f9:7a:e1:d4:02:62:e5:aa:c4:c7:8c:9a:15:79: b0:d9:00:03:5b:21:4b:61:8d:93:3a:bf:87:6d:01:67:bc:ca: b7:d4:fd:c5:c6:65:c5:86:a8:0c:f5:cc:02:5b:a2:53:2e:7b: 36:a3:9c:24:2a:e5:aa:0f:68:ce:d4:51:f9:18:17:00:20:20: e0:c4:ca:19:f4:d0:c8:23:4f:94:a4:fd:75:f7:f3:98:3a:3c: 2b:d4:80:7a:ed:24:42:44:3f:c2:60:26:97:1c:fe:3c:90:33: 7e:df:0b:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxQjgxMTAvBgNVBAUTKDZEN0Q4MDU3NkM0QjNCRTZBRkY0MzFGOEQzMjMzOEY3 MUZERjAxREQwHhcNMjYwNDA0MTcyNzExWhcNMjYwNDExMTcyNzExWjAYMRYwFAYD VQQDEw02OWQxNDllZi0wZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnt0UNbMvqr8ICjEkpOsBbpK7fhLKeB1AMVfibfi7MDyhEI2RdKS9LPKjbwdF 9t4UfhbPrCRbRc6526wz8Xldiaeu9Pzwx+Eh3LMPzRTsSoOM4rs/1YjOENIxxBrz 4Q5P09Lg8zHVj3ZlG0AYzXjPXW5sJgLGK9JI2Qz/AO8difU1N2vT9StkAx+A6mU/ pypv6Ef0yJs1C+niMD8orsLQ1R6Djx/wcJSbI+Gn3x9FxNbhkT1M11dWWreOVebY xt9Q3ufbYyI+o+XYzzgjzhrVaXxAt7vESmuaw/hinTuCCn+zs0kmGM2QdrjZ4D/j +yTGZUA7VfM8kxr84ONOYo/u9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORh8knU YicI8cXpj8e3a3nyKu+AMB8GA1UdIwQYMBaAFG19gFdsSzvmr/Qx+NMjOPcf3wHd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFCOC9GQkRFOTlGQTkw RkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8tYXY5REg0MHlNNDl4X2ZB ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYMkFWMnhMTy1hdjlESDQweU00OXhfZkFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFCOC9GQkRFOTlGQTkwRkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8t YXY5REg0MHlNNDl4X2ZBZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArXPD52yRjZmGUwb2G342GdF4aLKf2Yjh7ddOcy/dnnnyLkmWsskDttfZMJo7 mATLPEZGinEUe+e+2KF4Y5Kk4Px9alKwAons/F+iQAOroFcEGInYS/PcLGbAPgHZ Yk+MqV8If7qnBcA+kWTyyxts+T0t5F37omSjDr1vIIhfegeZJAVTPUyDSrDuhHZ0 3s65liN2bPl64dQCYuWqxMeMmhV5sNkAA1shS2GNkzq/h20BZ7zKt9T9xcZlxYao DPXMAluiUy57NqOcJCrlqg9oztRR+RgXACAg4MTKGfTQyCNPlKT9dffzmDo8K9SA eu0kQkQ/wmAmlxz+PJAzft8LOA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:56:54 2026 by rpki-client